CVE-2018-5282 | BDVDB-2026-94903 Detail

Description#

Kentico 9.0 through 11.0 has a stack-based buffer overflow via the SqlName, SqlPswd, Database, UserName, or Password field in a SilentInstall XML document. NOTE: the vendor disputes this issue because neither a buffer overflow nor a crash can be reproduced; also, reading XML documents is implemented exclusively with managed code within the Microsoft .NET Framework

Impact#

Weaknesses#

References#

Exploit#

History#

1. Version 12018-01-08Record published in the CVE List.
2. Version 22024-08-05Most recent update recorded in the CVE List.